SAST Security Testing

Position: SAST (Security Testing)

Location: Remote

VISA: Any (on your own W2)

Summary: The SAST (Security Testing) position requires handson expertise in driving the identification and reporting tasks related to Secure Application Security Testing (SAST) and Software Composition Analysis (SCA) for applications handling TIH (Trade Information Hub) data. This role is responsible for developing and maintaining technical IT/cyber security capabilities essential for safeguarding TIH applications throughout the Software Development Life Cycle (SDLC). The incumbent leads the designing planning testing and implementation phases of transitioning SAST/SCA responsibilities to TIH.

Responsibilities:

• Develop and maintain the technical IT/cyber capabilities for TIH applications concerning separation covering all phases of the software development lifecycle and software stack with a primary emphasis on static application security testing (SAST) and software composition analysis (SCA).
• Collaborate with TIH AppSec teams to identify methods for remediating vulnerabilities assess existing workarounds and address false positives through manual code review.
• Assist in integrating the SAST and SCA processes into shiftleft practices (Integrated Development Environment Pipelines and Change Management Systems) of newly established TIH processes.
• Participate in implementing new TIH information security technologies or integrating existing technologies including initial configuration installation change management and operational handover.
• Provide technical support and validate vulnerability identification processes running parallel to TIH processes ensuring timely vulnerability identification and explaining and interpreting complex difficult or sensitive information.
• Generate TIH separationspecific reports monthly/weekly in collaboration with TIH AppSec resources to ensure executive visibility into separation progress and the ownership transfer roadmap of TIH applications.

Note: The role requires a proactive approach to security testing strong technical skills in IT/cybersecurity and the ability to collaborate effectively with crossfunctional teams. The candidate must demonstrate proficiency in SAST and SCA methodologies along with experience in leading security testing initiatives in dynamic environments.